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Method for requesting User Access to an Application 
Technical field 

The present invention relates to a method and means for requesting access for a user 
5 to an application. 

Related art 

Operators of telecommunications networks and computing networks face an 
increasing demand from the customers for applications provided by so-called third 
parties. Third parties do neither belong to the network operator nor to the customer. 
10 Applications provided by said third parties are called external appUcations to 

distinguish between applications provided by the operator and applications provided 
by the third party. Applications often require information from a user to provide the 
application in a more tailored fashion. To avoid repeated inputs of these customer 
settings, they are stored in a user profile. 

15 The patent US 6,275,941 describes a method for accessing an external application 
through a conomunications network. 

However, growing demand for mobility in combination with the desire to receive 
the same service independent from the network used for access lead to a request for 
a method and means that support the access to an external Explication wherein the 
20 same user profile is used by the application independent from the chosen network. 

It is an object of the invention to provide such method and means for executing the 
method. 

Summary 

This will be solved advantageously by the method of claim 1 and the node of claim 
25 5. Further advantageous embodiments can be derived from the dependent claims. 

The invention relates to a method for requesting access for a user to an application. 
Said application is provided by an entity that can be accessed at least through a first 
network and a second network. The user attempted to access the application at least 
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once through the first network. The method comprises the following steps, granting 
the user access to the second network, receiving a request for accessing the 
application from the user, detecting that the user already contacted the application 
via the first network, requesting from the first network an identifier that has been 
5 used by the first network to identify the user towards the entity that provides the 
application, receiving the requested identifier, and sending a request for accessing 
the application and the identifier received from the first network towards the entity 
providing the application. 

In the invented method the identifier is requested fix)m the network through which 
10 the first attempt to access the application has been executed. This has the advantage 
that the identifier has not to be stored in the user equipment and enables to use 
different identifiers between network and user and network and entity providing the 
application. This can establish anonymity between the user and the entity. 

A user can be anyone who is authorised to access the first network and the second 
15 network. For example a subscriber of the first network if the operator of the first 
network and of the second network have a service agreement permitting access to 
the second network for subscribers of the first network. 

A network can be for example a wireline or wireless network for 
teleconmaunications or computing. An application can be for example a service or a 
20 game. An entity providing an application can be e.g. a fiirther network, a server, or a 
computing device. 

In an embodiment of the invented method, authentication information is sent to the 
first network. This authentication information is sent for example if authentication is 
necessary to receive the identifier of the user from the first network. This enables to 
25 avoid fraudulent requests for the identifier. 

The first and the second network can be run by a different operator. 

In an embodiment of the invented method, the entity providing the service stores a 
profile of the user at reception of the first attempt of the user to access the service. 
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Said profile is associated to the identification sent from the first network. In order to 
achieve that the stored profile is used for the user, the second network uses the same 
identification to identify the user towards the entity providing the service as the first 
network. The user profile can comprise e.g. information about user preferences, 
5 access data, former uses of the application. This is advantageous as it allows a 
unified appearance of the application towards the user and increases user 
friendliness, as settings have to be done only once, both independent from the 
network used to access the application. 

According to the invention, a node for requesting access for a user to an application 
10 comprises an input/output unit, a processing unit, and a determining unit for 

determining that a user already contacted an entity providing an application through 
a fiirther network. 

In an embodiment of the invented node, the node further comprises a logical unit for 
requesting an identification used by the further network to identify the user towards 
15 the entity providing the application. 

It is advantageous that the determining unit and the logical unit are integrated in the 
same node, because signalling capacity within a node is simpler and less costly to 
establish than between nodes. 

Brief description of the drawings 

20 The following figures show: 

Fig. 1 depicts a request for an external application according to the invention, 
Fig. 2 depicts a flow diagram for the invented method, and 
Fig. 3 depicts a schematic of a node as invented. 

25 Detailed description 

In the following the invention will be further described by means of examples and 
by means of figures. 
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Fig. 1 depicts a user U, requesting access to an external service provided by an 
entity EAl . The first access request is sent via a user equipment UEl and a first 
network TNI that is connected to the user equipment UEl and die entity providing 
the application EAL In a first step the user equipment UEl sends the request for 
5 accessing the application to the first network TNI . The first network generates an 
identifier for the user U that is used towards the entity EAl providing the 
application. The first network TNI stores the identifier, sends an access request for 
the user U and the identifier to the entity EAl providing the application in a step 
102. 

10 In a preferred embodiment of the invention, the entity providing the application 
EAl stores a user profile of the user U associated to the identifier sent by the first 
network TNI. 

It is not depicted whether or not the requested access to the application is granted. 
Furtheraiore not depicted is whether or not the first access via the first network is 
15 terminated before a second access is requested. 

In a next step 103, the user U requests access to the application by sending an access 
request firom a second user equipment UE2 to a second network TN2. 

The second network TN2 determines that the user already requested access to the 
application. The deteraiination can be performed for example by determining that 
the user identification used towards the second network indicates that the user has 
subscribed to another network or that the user has been ported to another network. 
The porting of subscribers can be determined by means of a number portability 
database. The network then requests information fi'om the network the user 
subscribed to, the home network of the user, whether the user already attempted to 
access the application. In another embodiment of the invention the user sends an 
indication that he already attempted to access the application via another network 
together with the request for access to the application. In yet another embodiment a 
database stores information about users, the applications they at least attempted to 
access and the network of first attempt. In a fiirther step 104 the second network 
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requests the identification the first network TNI used towards the entity EAl 
providing the application. The first network returns said identification in a next step 
105, 

In an embodiment of the invention, the method comprises the additional step of 
5 sending authentication information to the first network. The authentication 
information can be sent together with the request for the identifier. 

Afterwards the second network TN2 requests access for the user U from the entity 
providing the application EAl in a next step 106, using the identification received 
10 from the first network. 

Figure 2 depicts a flowchart of the invented mettiod. The method is executed by a 
second network to request access to an application provided by an entity that can be 
accessed at least via a first and the second network. At the first step 201 the second 

15 network is in a state that it is prepared to execute the method. In a next step 202 it 
grants a user access to the second network. In the following step 203 it receives a 
request for accessing an external application from the user. The network detects that 
the user already contacted the requested application through the first network in step 
204. The second network requests the identification used by the first network 

20 towards the entity providing the service firom the first network in the succeeding 
step 205. It receives the requested identifier from the first network in a step 206. 
Afterwards it sends an access request to the entity providing the application in a step 
207, using the identifier received fi"om the first network. Doing so, the invented 
method is finished 208. 

25 

A node N3 for requesting access according to the invention is depicted in figure 3. 
The node comprises an input/output unit I0U3 for sending and receiving messages 
and a processing unit PU3 for controlling the node and coordinating the units of the 
node. The node further comprises a determining unit DU3 for determining that a 
30 user requesting access to an application already contacted an entity providing the 
application. Said unit can perform that for example by determining that the user is 
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identified towards the network comprising the node by an identifier indicating that 
the user subscribed to another network, a so-called home network of the user, and 
contact said network. The determining unit DU3 can perform this also for example 
by analysing the request for access and as a result of the analysis realise that an 
5 indication that the user ab-eady contacted the application through another network. 
In a preferred embodiment, said analysis further delivers an identification of the 
other network. 
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In an embodiment of the invention, the node N3 further comprises a logical unit 
LU3 for contacting a first network for requesting an identification used by the first 
network to identify the user towards the entity providing the application. 



